7673 matches found
CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190
CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Avoid dereferencing a stale runlist element during MFT writeback. The ntfswritemftblock function maps each $MFT record through the $MFT data runlist. For sub-folio clusters, it retrieves a struct runlistelement from...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l41: Fixed an out-of-bounds access in otppackedelementt The value CS35L41NUMOTPELEM is 100, but only 99 entries are defined in the array otpmap1/2CS35L41NUMOTPELEM. This will trigger UBSAN to report a out-of-bounds...
WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jamaal ahmed in WordPress Plugin ProLancer Element versions = 1.4.8...
WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jamaal ahmed in WordPress Plugin ProLancer Element versions = 1.4.8...
CVE-2026-28190: Missing Authorization
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
PT-2026-80831
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
PT-2026-80909
Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.0.0-RC1 through 4.18.1 Craft CMS versions 5.0.0-RC1 through 5.10.5 Description An authenticated remote code execution issue exists in the control panel element-search condition handling. A JSON cleanse bypass in...
PT-2026-80832
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-5389
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the tomarkdown function when serializing attacker-controlled pre content. Attackers can place backticks inside sanitized pre elements to break out of fixed-length code fences, allowing raw HTML to execute when the...
PT-2026-79770
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to markdown function when serializing attacker-controlled pre content. Attackers can place backticks inside sanitized pre elements to break out of fixed-length code fences, allowing raw HTML to execute when the...
CVE-2026-74651 staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwgetwpaie rtwgetwpaie reads bytes at fixed offsets into a vendor-specific information element without checking that the element is long enough, causing an out-of-bounds read for a short...
CVE-2026-74649
A missing length validation in the Linux kernel rtl8723bs staging driver's WEP shared-key authentication handler (OnAuthClient()) allows a malicious Access Point to send a malformed WLAN_EID_CHALLENGE element with a length up to 255 bytes, which is then copied via memcpy() into a fixed 128-byte c...
CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...
CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...